VDB
RHSA-2026:74681
RHSA-2026:74681
PUBLISHED
CVSS 8.800000190734863 HIGH
A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by tricking a user into loading a specially crafted spell file. When the user invokes spell suggestion, the editor attempts to process the malicious file, leading to an out-of-bounds write that corrupts memory and causes the application to crash, resulting in a denial of service.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhai/base-image-spyre-rhel9@sha256:de317328281eace002f4fb5eb9d34a93a2cb916704513ea3df9db278206ab565_amd64 as a component of Red Hat OpenShift AI 3.4 | * |
| Red Hat | registry.redhat.io/rhai/base-image-spyre-rhel9@sha256:46d73cbfa1e15a7a27bbbe8c477819b451f84a2784d2c94c6c042555a8e11f95_ppc64le as a component of Red Hat OpenShift AI 3.4 | * |
| Red Hat | registry.redhat.io/rhai/base-image-spyre-rhel9@sha256:6647cc960c5b5f432df7b155b493cec551cc09f9569e3bffc36cf723f0c3a2b2_s390x as a component of Red Hat OpenShift AI 3.4 | * |
Timeline
- Oct 1, 2026 CVE Published
- Oct 8, 2026 CVE Updated
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:74681 advisory
- https://access.redhat.com/security/cve/CVE-2025-6170 advisory
- https://access.redhat.com/security/cve/CVE-2026-11822 advisory
- https://access.redhat.com/security/cve/CVE-2026-11824 advisory
- https://access.redhat.com/security/cve/CVE-2026-11940 advisory
- https://access.redhat.com/security/cve/CVE-2026-15308 advisory
- https://access.redhat.com/security/cve/CVE-2026-15588 advisory
- https://access.redhat.com/security/cve/CVE-2026-16118 advisory
- https://access.redhat.com/security/cve/CVE-2026-47162 advisory
- https://access.redhat.com/security/cve/CVE-2026-47167 advisory
- https://access.redhat.com/security/cve/CVE-2026-52858 advisory
- https://access.redhat.com/security/cve/CVE-2026-54369 advisory
- https://access.redhat.com/security/cve/CVE-2026-55693 advisory
- https://access.redhat.com/security/cve/CVE-2026-57455 advisory
- https://access.redhat.com/security/cve/CVE-2026-57456 advisory
- https://access.redhat.com/security/cve/CVE-2026-58010 advisory
- https://access.redhat.com/security/cve/CVE-2026-58011 advisory
- https://access.redhat.com/security/cve/CVE-2026-58012 advisory
- https://access.redhat.com/security/cve/CVE-2026-58013 advisory
- https://access.redhat.com/security/cve/CVE-2026-58014 advisory
…and 170 more